foreman
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 43 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 1, 2015 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Foreman: domain and subnet interface api skips host search filters
Foreman: api filter lookup ignores a search-limited filter permission
CVE-2026-12405: Foman mote Execution: command injection via effective_user (fixed in 16.6.6, 17.2.2, 18.0.1)
CVE-2026-12423: Foman: provisioning token validation flaw (fixed in 3.19.2, 5.0.1)
CVE-2026-12540: Foman: command injection in foman-rake errors:fetch_log (fixed in 3.19.2, 5.0.1)
CVE-2026-12541: Foman: command injection in foman-rake database tasks (fixed in 3.19.2, 5.0.1)
CVE-2026-12542: Foman: command injection in foman-tail (fixed in 3.19.2, 5.0.1)
CVE-2026-12544: Foman: SSTI and unsafe deserialization in configuration (fixed in 3.19.2, 5.0.1)
CVE-2026-12545: Hammer CLI: editor command injection (fixed in 3.19.1, 5.0.1)
CVE-2026-56098: Katello: gistry Proxy authorization bypass (fixed in 4.21.2, 5.0.1)
Monitor foreman in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.